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~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . This communication is responsive to the submissions dated 05/18/2009 . 

2. The allowed claim(s) is/are 1-11, 19-24 and 29 . 

3. ^ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) ^All b)DSome* c) □ None of the: 

1. ^ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 
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(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1. 84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 
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attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 



Attachment(s) 

1 . □ Notice of References Cited (PTO-892) 

2. □ Notice of Draftperson's Patent Drawing Review (PTO-948) 

3. □ Information Disclosure Statements (PTO/SB/08), 

Paper No./Mail Date 

4. □ Examiner's Comment Regarding Requirement for Deposit 

of Biological Material 



5. □ Notice of Informal Patent Application 

6. □ Interview Summary (PTO-413), 

Paper No./Mail Date . 

7. ^ Examiner's Amendment/Comment 

8. ^ Examiner's Statement of Reasons for Allowance 

9. □ Other . 



/SHANTO M ABEDIN/ 
Examiner, Art Unit 2436 



Notice of Allowability 



Part of Paper No./Mail D 



Application/Control Number: 10/613,522 Page 2 

Art Unit: 2436 

DETAILED A CTION 

1 . This office action is in response to the Appeal Brief filed on 05/1 8/2009. The finality of the 
previous office action is withdrawn. 

2. The prior office actions are incorporated herein by reference. In particular, the observations 
with respect to claim language, and response to previously presented arguments. 

3 . Claims 1 - 1 1 , 1 9-24 and 29 are allowed. 

RESPONSE TO ARGUMENTS 

4. The applicant's arguments regarding 35 USC 103(a) type rejections are fully considered. 
The previous 35 USC 103 (a) type rejections are withdrawn based on the applicant's arguments and 
the amendments made to the claims through the examiner's amendments presented in this office 
action. 

5. The applicant's arguments regarding 35 USC 101 type rejections are fully considered, and 
found persuasive. The previous 35 USC 101 type rejections of claims 22-24 are withdrawn. 

EXAMINER 'S AMENDMENT 

6. An examiner's amendment to the record appears below. Should the changes and/ or additions 
be unacceptable to the applicant, an amendment may be filed as provided by 37 CFR 1.312. To 
ensure consideration of such an amendment, it MUST be submitted no later than the payment of the 
issue fee. Authorization for this examiner's amendment was given in the telephone interview with 
the applicant's representative Mr. David Millers on August 27, 2009. 

Claims 1, 8, 19, 22 and 29 have been amended as follows: 



Application/Control Number: 10/613,522 Page 3 

Art Unit: 2436 

Claim 1. (Currently Amended) A method of enabling a second party to prove to a third 
party the existence of an association between the second party and a first party, the first party being 
associated with a first element of a first algebraic group, the second party being associated with a 
second clement, element of a second algebraic group, the second element being formed from an 
identifier string of the second party using a hash function, and there being a computable bilinear map 
for the first and second olomonts; wherein elements, wherein the method comprises: 

a second-party computer entity, acting on behalf of the second party , performing the steps of : 

receives receiving a shared secret provided by the first party as the product of a first secret 
and the second element; 

computes computing first, second and third verification parameters, wherein the first 
verification parameter is a product of a second secret and said shared secret, the second verification 
parameter is a product of the second secret and the second element and the third verification 
parameter is a product of the second secret and the first element; and 

outputs outputting the first, second and third verification parameters for use by the third party 
in proving the association between the first and second parties , wherein the first, second, and third 
verification parameters enable the third party to verify the association between the first and second 
parties by performing checks that use the first, second, and third verification parameters and public 
information . 



Claim 8. (Currently Amended) A method of verifying an association between a first party 
associated with a first element, element of a first algebraic group, and a second party associated with 
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a second clement, element of a second algebraic group, the first and second elements being such that 
there exists a bilinear mapping p for these elements, the method comprising; 

a third-party computer entity carrying out the following operations: 

receiving both data indicative of said first element, and a first product formed by the first 
party from a first secret and the first element; 

receiving in respect of the second party an identifier string and first, second and third 
verification parameters; 

computing the second element from the identifier string of the second party; 

carrying out a first check to determine that the following equality is satisfied: 

/j(third verification parameter, computed second element) =/?(first element, second 

verification parameter) 

carrying out a second check to determine that the following equality is satisfied: 

p(first element, first verification parameter)=/>(first product, second verification 
parameter) 

verifying the existence of the association between the first and second parties only where 
checks are passed. 

Claim 19. (Currently Amended) Apparatus arranged to enable a third party to verify an 
association between the apparatus and a first party that has a first secret and is associated with a first 
element of a first algebraic group, the apparatus being associated with a second element, of a second 
algebraic group, and the first and second elements being such that there exists a bilinear mapping p 
for these elements; elements, the apparatus comprising: 
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a memory for holding a second secret and an identifier string associated with the apparatus, 
means for forming said second element from said identifier string using a hash function, 
means for receiving from the first party a shared secret based on said first secret and said first 
element, and for storing this shared secret in the memory, 

means for computing first, second and third verification parameters, wherein the first 
verification parameter is a product of the second secret with said shared secret, the second 
verification parameter is a product of the second secret and said second element and the third 
verification parameter is a product of the second secret and said first element, and 

means for making available said identifier string and said verification parameters to the third 
party , wherein the first, second, and third verification parameters enable the third party to verify the 
association between the first party and the apparatus by performing checks that use the first, second, 
and third verification parameters and public information . 

Claim 22. (Currently Amended) Apparatus for allowing a third party to verify verifying 
an association between a first party associated with a first element, element of a first algebraic group, 
and a second party associated with a second element, element of a second algebraic group; group, 
the first and second elements being such that there exists a bilinear mapping p for these elements; 
elements, the apparatus comprising: 

means for receiving both data indicative of the first element, and a first product formed by 
the first party from a first secret and the first element; 

means for receiving in respect of the second party both an identifier string, and first, second 
and third verification parameters; 
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a memory for holding information received through the means for receiving; 
means for computing the second element from the identifier string of the second party using 
a hash function; 

means for carrying out a first check to determine that the following equality is satisfied: 

/)(third verification parameter, computed second element) = /)(first element, second 
verification parameter); 

means for carrying out a second check to determine that the following equality is satisfied: 

p(first element, first verification parameter) =/)(first product, second verification 
parameter); 

means responsive to both checks being passed, to confirm that there exists an association 
between the first and second parties. 

Claim 29. (Currently Amended) A method of enabling a second party to prove to a third 
party the existence of an association between the second party and a first party, the first party being 
associated with a first element of a first algebraic group, the second party being associated with a 
second element, of a second algebraic group, formed from an identifier string of the second party 
using a hash function, and there being a computable bilinear map for the first and second elementSi 
wherein the method comprises: ; wherein 

a second-party computer entity, acting on behalf of the second party , performing the steps of : 

(1) receives receiving a shared secret provided by the first party as the product of a first 
secret and the second element; 

(2) computes computing : 
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(i) a first verification parameter as the product of a second secret with said shared 

secret, 

(ii) a second verification parameter as the product of the second secret with the 
second element, and 

(iii) a third verification parameter as the product of the second secret with the first 
element; and 

(3) outputs outputting the first, second and third verification parameters for use by the third 

third verification parameters enable the third party to verify the association between the first and 
second parties by performing checks that use the first, second, and third verification parameters and 
public information . 

EXAMINER 'S REASONS FOR ALLOWANCE 

7. The following is an examiner's statement of reasons for allowances: 

Independent claims 1,19 and 29 are patentable over the cited prior arts because they do not 
anticipate nor fairly and reasonably teach independently or in combination, a method/ apparatus 
comprising besides other limitations: the second element being formed from an identifier string of 
the second party using a hash function, and there being a computable bilinear map for the first and 
second elements, wherein a second-party computer entity, acting on behalf of the second party, 
computing first, second and third verification parameters, wherein the first verification parameter is 
a product of a second secret and said shared secret, the second verification parameter is a product of 
the second secret and the second element and the third verification parameter is a product of the 
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second secret and the first element; and outputting the first, second and third verification parameters 
for use by the third party wherein the first, second, and third verification parameters enable the third 
party to verify the association between the first and second parties by performing checks that use the 
first, second, and third verification parameters and public information. 

In particular, patentability exists, at least in part, with the recitation of a second-party 
computer entity, acting on behalf of the second party, computing first, second and third verification 
parameters using shared secret, second secret and elements of algebraic groups, and outputting the 
first, second and third verification parameters for use by the third party wherein the first, second, and 
third verification parameters enable the third party to verify the association between the first and 
second parties by performing checks that use the verification parameters. 

Independent claims 8 and 22 are patentable over the cited prior arts because they do not 
anticipate nor fairly and reasonably teach independently or in combination, a method/ apparatus 
comprising besides other limitations: allowing a third party to verify an association between a first 
party associated with a first element of a first algebraic group, and a second party associated with a 
second element of a second algebraic group; and a third -party computer entity receiving both data 
indicative of said first element, and a first product formed by the first party from a first secret and the 
first element, and receiving in respect of the second party an identifier string and first, second and 
third verification parameters; and carrying out a first check to determine that the following equality 
is satisfied: /)(third verification parameter, computed second element) =/)(first element, second 
verification parameter), and carrying out a second check to determine that the following equality is 
satisfied: /)(first element, first verification parameter)=/?(first product, second verification 
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parameter); and verifying the existence of the association between the first and second parties only 
where checks are passed. 

Dependent claims 2-7, 9-11, 20-21 and 23-24 are allowed because of their dependencies on 
the allowable independent claims. 

CONCLUSION 

8 . Claims 1 - 1 1 , 1 9-24 and 29 are patentable. 

9. Any comments considered necessary by applicant must be submitted no later than the 
payment of the issue fee and, to avoid processing delays should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

10. Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Shanto M Z Abedin whose telephone number is 571-272-3551. The examiner 
can normally be reached on M-F from 10:00 AM to 6:30 PM. If attempts to reach the examiner by 
telephone are unsuccessful, the examiner's supervisor, Moazzami Nasser, can be reached on 571 - 
272-4195. The fax phone number for the organization where this application or proceeding is 
assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR system, 
see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR system, 
contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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Shanto M. Z. Abedin 
Examiner, A.U. 2436 



/Nasser G Moazzami/ 

Supervisory Patent Examiner, Art Unit 2436 



